Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:34777
HistoryMar 22, 2022 - 4:11 a.m.

Remote Code Execution (RCE)

2022-03-2204:11:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
rce vulnerability
scriptengine
script route poisoning

EPSS

0.003

Percentile

69.5%

JSON

dubbo is vulnerable to remote code execution. when using default rules with ScriptEngine, An attacker can inject and execute malicious scripts via Script route poisoning

Related

cve 1
prion 1
nvd 1
osv 2
cvelist 1
gitlab 1
github 1
cve
cve
CVE-2021-30181
2021-06-01 14:15:09
prion
prion
Design/Logic Flaw
2021-06-01 14:15:00
nvd
nvd
CVE-2021-30181
2021-06-01 14:15:09
osv
osv
CVE-2021-30181
2021-06-01 14:15:09
Code injection in Apache Dubbo
2022-03-18 17:57:04
cvelist
cvelist
CVE-2021-30181 Apache Dubbo RCE on customers via Script route poisoning (Nashorn script injection)
2021-05-29 07:30:12
gitlab
gitlab
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
2022-03-18 00:00:00
github
github
Code injection in Apache Dubbo
2022-03-18 17:57:04

EPSS

0.003

Percentile

69.5%

JSON
Related for VERACODE:34777
cve1prion1nvd1osv2cvelist1gitlab1github1